Re: Closing ports...

[Sergio Rodriguez de Guzman Martinez <sguzman@inicia.es>]

You have configured junkbuster to *work* with the local network. If your
box receives a connection from other place it will give a "Operation not
permitted" mesage, but the port is still open to everyone. You can't
configure it in the /etc/junkbuster/acl (access list). To close the port
you must use iptables.


markus.grunwald@gmx.de (2002-09-15 at 1815.04 +0200):
> Hello, 
> 
> using debian-testing, I wanted to secure my internet box. First of all,
> I wanted to close unnecessary ports. I noticed one thing: With netstat,
> _all_ ports were open to the whole world:
> 
> Proto Recv-Q Send-Q Local Address           Foreign Address        
> State tcp 0 0 *:6565 *:* LISTEN 8078/junkbuster     
> 
> But I have configured junkbuster to listen only to my network:
> deny 0.0.0.0/0
> permit 192.168.42.0/24
> 
> What do I understand wrong here ? TIA !
> 
> --
> Markus Grunwald
> 
> Registered Linux User Nr 101577      http://www.grunwald.2xs.de
> http://counter.li.org                (hier pgp/gpg public key)



-- 
Sergio Rodríguez de Guzmán Martínez| Quien miente, pronto se arrepiente. 
sguzman@inicia.es                  | 
-=Debian GNU/Linux Sid=-   -o)     | 
Kernel 2.4.17               /\     | 
on a i686                  _\_v    | 
PGP Key www.nova1one.com/satai.asc | 
Registered Linux user number 279084